Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QlmPPYNeyBirJuCHGZPaocQBhGM.roa
File: QlmPPYNeyBirJuCHGZPaocQBhGM.roa (raw, json)
Hash identifier: vlIn1OYp4ngkcPYR1xflOX/Ls8BOV57/o+CyvqJpKds=
Subject key identifier: 42:59:8F:3D:83:5E:C8:18:AB:26:E0:87:19:93:DA:A1:C4:01:84:63
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187D7A850D45483293D924CFE63B1A935F1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QlmPPYNeyBirJuCHGZPaocQBhGM.roa
Signing time: Mon 01 May 2023 14:12:24 +0000
ROA not before: Mon 01 May 2023 14:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d7:a8:50:d4:54:83:29:3d:92:4c:fe:63:b1:a9:35:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 1 14:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42598f3d835ec818ab26e0871993daa1c4018463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d7:6c:94:86:32:f8:73:ba:b5:7d:70:31:4f:
ea:1d:e5:1b:cc:ad:8b:c0:27:27:b9:8a:65:9b:4a:
fe:3e:82:4d:cf:ef:51:cf:8d:b4:e7:eb:45:6c:e4:
4a:5d:ba:b4:6c:04:1e:52:be:0c:6e:d7:d0:43:22:
d3:d6:5e:ad:48:31:2d:e0:38:8e:cc:a6:c4:f8:34:
11:b2:09:97:34:0b:b8:64:ee:46:c9:a4:ab:b5:f7:
8a:c0:9d:45:82:ec:41:f2:c7:f8:cb:06:95:3e:6d:
1d:31:53:42:70:34:be:13:d0:13:5c:74:7a:cf:78:
f5:2f:d7:12:87:df:f8:a7:74:5c:7a:2b:ee:cd:87:
d1:5a:5b:10:f6:f4:51:33:15:b7:db:1e:88:78:98:
66:51:98:fe:28:61:44:f8:0c:b2:10:86:71:ed:4d:
38:18:33:a2:86:31:58:dc:e5:ce:0f:05:54:3e:42:
fe:ef:bf:86:d5:5e:5d:91:12:35:e3:b1:85:45:c6:
c5:e4:5b:07:af:c6:08:12:ab:c1:0b:dd:56:dc:ab:
ea:d3:8a:43:e8:b5:08:ab:ef:12:38:11:a0:7b:4e:
77:fc:46:d0:e0:15:34:d5:f7:f5:0c:c0:d9:d2:1a:
1a:32:a7:e0:58:e1:f0:dc:e7:c7:eb:39:21:60:b7:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:59:8F:3D:83:5E:C8:18:AB:26:E0:87:19:93:DA:A1:C4:01:84:63
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QlmPPYNeyBirJuCHGZPaocQBhGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:24:3d:3d:06:6b:a8:fa:a6:1f:93:e9:e9:e5:7d:d0:a1:08:
37:16:d6:45:38:a3:4b:c1:66:ee:1c:7d:76:93:2f:7f:e8:8e:
7c:bd:76:0a:7b:32:8a:a3:74:f5:b5:33:4c:f3:57:75:88:ae:
cb:98:ce:83:74:b3:9d:26:b6:1a:0b:49:80:a6:da:f7:a1:e3:
d7:bd:d4:07:57:01:42:d0:21:7d:db:20:90:1b:96:d9:a2:f0:
c1:88:55:b4:f7:9b:df:38:ea:11:c8:21:68:cc:de:b3:5c:f5:
6b:75:40:89:95:f8:a3:e5:5e:43:ef:79:c9:98:55:1d:8d:1d:
a4:e3:99:e9:c7:2e:2a:b3:d8:59:12:c7:42:11:c8:3a:07:79:
df:6c:db:92:09:7f:31:50:0d:4a:e7:64:38:21:f1:99:1a:05:
de:88:ea:c9:46:21:35:68:7d:a7:3d:65:61:6b:b8:5c:87:ec:
d6:2d:b6:d4:e2:fd:04:9f:db:4a:6d:65:54:1b:b8:90:b5:56:
05:97:aa:21:81:ca:a0:46:5e:fa:5b:14:ad:f1:a0:75:b0:b1:
29:75:83:ac:5c:fc:06:60:8a:ff:a3:42:44:72:b1:a4:5c:bf:
37:94:27:2f:c0:34:07:9e:bf:8b:2a:14:95:6f:b8:a3:3d:2f:
04:13:ed:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:14:31 2025 by rpki-client